This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/9795cc-3700-4aa0-a1ed-a6d94bf244b4/1/7w_ROty5xV7Zzu_Q0Pb5tBaVcj8.mft File: 7w_ROty5xV7Zzu_Q0Pb5tBaVcj8.mft (raw, json) Hash identifier: /U4E7RiRPE0G96d7CW1JovicTh7LdHulUqrVeRWJs5s= Subject key identifier: 25:DF:60:A1:DE:3E:48:BD:CD:C2:7E:ED:59:64:3D:4D:7B:00:B5:7B Authority key identifier: EF:0F:D1:3A:DC:B9:C5:5E:D9:CE:EF:D0:D0:F6:F9:B4:16:95:72:3F Certificate issuer: /CN=ef0fd13adcb9c55ed9ceefd0d0f6f9b41695723f Certificate serial: 019AF3523B322A3F76707E639A4A6C626519 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7w_ROty5xV7Zzu_Q0Pb5tBaVcj8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/9795cc-3700-4aa0-a1ed-a6d94bf244b4/1/7w_ROty5xV7Zzu_Q0Pb5tBaVcj8.mft Manifest number: 0442 Signing time: Sat 06 Dec 2025 11:00:43 +0000 Manifest this update: Sat 06 Dec 2025 11:00:43 +0000 Manifest next update: Sun 07 Dec 2025 11:00:43 +0000 Files and hashes: 1: 7w_ROty5xV7Zzu_Q0Pb5tBaVcj8.crl (hash: vwuRf9IEQtLoHDFRnz7dS0v4fb5Y3PowcAR/VEaDG2k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/9795cc-3700-4aa0-a1ed-a6d94bf244b4/1/7w_ROty5xV7Zzu_Q0Pb5tBaVcj8.crl rsync://rpki.ripe.net/repository/DEFAULT/59/9795cc-3700-4aa0-a1ed-a6d94bf244b4/1/7w_ROty5xV7Zzu_Q0Pb5tBaVcj8.mft rsync://rpki.ripe.net/repository/DEFAULT/7w_ROty5xV7Zzu_Q0Pb5tBaVcj8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:3b:32:2a:3f:76:70:7e:63:9a:4a:6c:62:65:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef0fd13adcb9c55ed9ceefd0d0f6f9b41695723f Validity Not Before: Dec 6 11:00:43 2025 GMT Not After : Dec 7 11:00:43 2025 GMT Subject: CN=25df60a1de3e48bdcdc27eed59643d4d7b00b57b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ab:c7:27:36:6e:07:11:da:d9:e1:9c:ff:3a: fa:57:20:36:4f:c8:6e:c4:34:fb:c2:28:51:22:a9: b7:67:04:3e:d6:ce:78:44:ab:e7:81:86:ea:13:be: f9:31:f5:96:6d:ca:5c:e5:39:df:08:68:c2:32:43: 3d:38:05:bf:d9:5d:9c:22:66:25:23:79:10:12:1f: 64:3e:fc:10:3d:be:01:f9:c8:5f:fd:0e:60:86:23: b8:1e:5d:8d:da:30:b1:38:22:5b:fe:e4:cc:16:b9: 03:6e:e1:33:56:4a:01:a4:1f:2f:82:e2:e5:76:20: ab:3c:e1:c1:ce:a9:2b:a9:f4:85:04:b1:c2:f4:de: 5d:f2:7f:df:bc:7d:b8:5c:89:ba:7f:6d:d9:cf:a3: 88:b5:27:65:f0:b7:87:05:56:09:72:8d:b2:2e:22: 19:31:38:63:61:20:e6:57:3d:cb:2f:3d:69:0b:21: 16:54:cd:7b:16:9f:f6:f5:d9:54:ae:12:d0:95:35: a2:61:2b:73:71:c8:31:66:81:2e:ae:ea:4c:0b:40: 4b:8a:db:84:5c:d0:76:16:06:d4:11:ec:19:20:34: 1d:73:40:a4:ea:04:34:38:75:a9:1f:a9:a9:ab:f7: fc:29:7b:99:fa:18:76:fc:d7:13:a3:49:77:52:98: 5b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:DF:60:A1:DE:3E:48:BD:CD:C2:7E:ED:59:64:3D:4D:7B:00:B5:7B X509v3 Authority Key Identifier: keyid:EF:0F:D1:3A:DC:B9:C5:5E:D9:CE:EF:D0:D0:F6:F9:B4:16:95:72:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7w_ROty5xV7Zzu_Q0Pb5tBaVcj8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9795cc-3700-4aa0-a1ed-a6d94bf244b4/1/7w_ROty5xV7Zzu_Q0Pb5tBaVcj8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9795cc-3700-4aa0-a1ed-a6d94bf244b4/1/7w_ROty5xV7Zzu_Q0Pb5tBaVcj8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:42:9f:22:b3:23:48:ad:46:8d:75:90:30:3b:3b:42:83:5a: a5:5c:38:ee:c6:c5:0d:8e:49:a9:e0:89:06:b6:48:45:64:5b: 0b:4a:b6:7f:c9:48:fa:60:d8:4f:47:27:33:20:e7:d7:97:7c: f8:de:12:77:da:6f:73:91:2e:70:1c:d1:25:a9:13:63:a7:64: 4d:37:cd:e2:9d:01:8e:63:fc:2c:49:25:84:83:f6:76:3b:2c: 7c:6e:a8:2f:4b:50:24:5d:b8:d8:1d:9d:bf:09:af:ed:1c:87: 38:3b:a1:a6:a6:a8:4b:84:f3:0e:3b:38:2a:5a:ea:3a:4c:3f: 50:13:96:f9:15:04:3e:02:c1:b9:b7:97:65:6c:76:e2:a7:ed: f6:80:5b:75:9c:ee:85:c9:6b:4c:6b:67:bc:6d:ee:d1:0a:f4: fa:8d:a0:e8:94:c2:6f:18:43:25:98:57:0f:fd:d0:5d:96:9d: 1d:79:19:64:f5:65:19:dc:8f:72:41:2d:87:0a:99:a5:1f:e1: cd:89:b3:48:34:fe:02:02:8d:6a:bf:7e:4b:c8:82:cc:e3:89: c7:57:d4:89:f5:16:b3:1f:12:40:2b:a3:51:a2:f8:6e:79:db: 17:1e:ca:14:2a:57:0c:42:55:22:b1:58:c2:03:aa:79:d5:03: e1:e0:67:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUjsyKj92cH5jmkpsYmUZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmMGZkMTNhZGNiOWM1NWVkOWNlZWZkMGQwZjZmOWI0MTY5 NTcyM2YwHhcNMjUxMjA2MTEwMDQzWhcNMjUxMjA3MTEwMDQzWjAzMTEwLwYDVQQD EygyNWRmNjBhMWRlM2U0OGJkY2RjMjdlZWQ1OTY0M2Q0ZDdiMDBiNTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKvHJzZuBxHa2eGc/zr6VyA2T8hu xDT7wihRIqm3ZwQ+1s54RKvngYbqE775MfWWbcpc5TnfCGjCMkM9OAW/2V2cImYl I3kQEh9kPvwQPb4B+chf/Q5ghiO4Hl2N2jCxOCJb/uTMFrkDbuEzVkoBpB8vguLl diCrPOHBzqkrqfSFBLHC9N5d8n/fvH24XIm6f23Zz6OItSdl8LeHBVYJco2yLiIZ MThjYSDmVz3LLz1pCyEWVM17Fp/29dlUrhLQlTWiYStzccgxZoEurupMC0BLituE XNB2FgbUEewZIDQdc0Ck6gQ0OHWpH6mpq/f8KXuZ+hh2/NcTo0l3UphbrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCXfYKHePki9zcJ+7VlkPU17ALV7MB8GA1UdIwQY MBaAFO8P0TrcucVe2c7v0ND2+bQWlXI/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3dfUk90eTV4VjdaenVfUTBQYjV0QmFWY2o4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS85Nzk1Y2MtMzcwMC00YWEwLWExZWQt YTZkOTRiZjI0NGI0LzEvN3dfUk90eTV4VjdaenVfUTBQYjV0QmFWY2o4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS85Nzk1Y2MtMzcwMC00YWEwLWExZWQtYTZkOTRiZjI0NGI0 LzEvN3dfUk90eTV4VjdaenVfUTBQYjV0QmFWY2o4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaEKfIrMj SK1GjXWQMDs7QoNapVw47sbFDY5JqeCJBrZIRWRbC0q2f8lI+mDYT0cnMyDn15d8 +N4Sd9pvc5EucBzRJakTY6dkTTfN4p0BjmP8LEklhIP2djssfG6oL0tQJF242B2d vwmv7RyHODuhpqaoS4TzDjs4KlrqOkw/UBOW+RUEPgLBubeXZWx24qft9oBbdZzu hclrTGtnvG3u0Qr0+o2g6JTCbxhDJZhXD/3QXZadHXkZZPVlGdyPckEthwqZpR/h zYmzSDT+AgKNar9+S8iCzOOJx1fUifUWsx8SQCujUaL4bnnbFx7KFCpXDEJVIrFY wgOqedUD4eBnPw== -----END CERTIFICATE-----Generated at Sat Dec 6 17:29:19 2025 by rpki-client